Skip to content

release: v1.2.1 - #8322

Merged
sriramveeraghanta merged 2 commits into
masterfrom
canary
Dec 12, 2025
Merged

release: v1.2.1#8322
sriramveeraghanta merged 2 commits into
masterfrom
canary

Conversation

@sriramveeraghanta

Copy link
Copy Markdown
Member

🛡️ Security

  • Removing underlying dependencies with NextJS.

Copilot AI review requested due to automatic review settings December 12, 2025 08:19
@coderabbitai

coderabbitai Bot commented Dec 12, 2025

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch canary

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This release removes Next.js as a transitive dependency to address security concerns. The codebase uses React Router for routing (not Next.js), but was pulling in Next.js through the next-themes package. The PR upgrades next-themes to version 0.4.6, which no longer requires Next.js as a peer dependency, and removes the Next.js override from the root package configuration.

  • Updates next-themes from ^0.2.1 to 0.4.6 (pinned) across all apps, removing Next.js peer dependency
  • Removes Next.js override from root package.json
  • Cleans up all Next.js-related packages and transitive dependencies from pnpm-lock.yaml

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Removes next: "16.0.7" from pnpm overrides section
apps/web/package.json Updates next-themes to exact version 0.4.6 (from ^0.2.1)
apps/space/package.json Updates next-themes to exact version 0.4.6 (from ^0.2.1)
apps/admin/package.json Updates next-themes to exact version 0.4.6 (from ^0.2.1)
pnpm-lock.yaml Removes Next.js packages (@next/*, next@14.2.32), dependencies (styled-jsx, busboy, streamsearch, @swc/helpers@0.5.5, postcss@8.4.31), and updates next-themes snapshots to remove Next.js peer dependency
Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@sriramveeraghanta
sriramveeraghanta merged commit 81cea32 into master Dec 12, 2025
18 checks passed
@sriramveeraghanta
sriramveeraghanta deleted the canary branch December 12, 2025 11:06
DoctorFogarty pushed a commit to DoctorFogarty/plane that referenced this pull request Aug 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants